MYRA RAT npm Package apintergrationpost Execution Detection

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•1

Detects the execution of processes associated with the malicious npm package 'apintergrationpost', which acts as a masquerade for a Linux RAT (Remote Access Trojan) labeled as MYRA. The rule monitors process launch events for command lines or file paths containing the package name.